all InfoSec News logo
all InfoSec News - Your InfoSec news aggregator
Log in Sign up
all InfoSec News

Qemu: 'qemu-img info' leads to host file read/writeA flaw was found in the QE...

Add to bookmarks
July 2, 2024, 3:57 p.m. |

CVE | THREATINT - NEW cve.threatint.com

A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. A specially crafted image file containing a `json:{}` value describing block devices in QMP could cause the qemu-img proce...

block command devices disk file flaw found host host file image img info json qemu utility value

Visit resource

More from cve.threatint.com / CVE | THREATINT - NEW

The built-in SSH server of Gogs through 0.13.0 allows argument injection in i... 2 hours ago | cve.threatint.com
argument attackers can code +9
Gogs through 0.13.0 allows deletion of internal files. 2 hours ago | cve.threatint.com
deletion files internal
Gogs through 0.13.0 allows argument injection during the previewing of changes. 2 hours ago | cve.threatint.com
argument injection
Gogs through 0.13.0 allows argument injection during the tagging of a new rel... 3 hours ago | cve.threatint.com
argument injection new release release +1
Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus ... 3 hours ago | cve.threatint.com
attackers blocking bypass can +7
VMware Cloud Director Availability contains an HTML injection vulnerability. ... 5 hours ago | cve.threatint.com
access actor availability can +13
Information exposure vulnerability in the MRW plug-inInformation exposure vul... 5 hours ago | cve.threatint.com
attacker customers exposure information +4
QR/demoapp/qr_image.php in Asial JpGraph Professional through 4.2.6-pro allow... 5 hours ago | cve.threatint.com
arbitrary code attackers code data +6
Kaiten 57.128.8 allows remote attackers to enumerate user accounts via a craf... 6 hours ago | cve.threatint.com
account accounts attackers login +2

Jobs in InfoSec / Cybersecurity

Find Talent

Senior Software Java Developer

@ Swiss Re | Madrid, M, ES
View on infosec-jobs.com

Product Owner (Hybrid) - 19646

@ HII | Fort Belvoir, VA, Virginia, United States
View on infosec-jobs.com

Sr. Operations Research Analyst

@ HII | Albuquerque, NM, New Mexico, United States
View on infosec-jobs.com

Lead SME Platform Architect

@ General Dynamics Information Technology | USA VA Falls Church - 3150 Fairview Park Dr (VAS095)
View on infosec-jobs.com

DevOps Engineer (Hybrid) - 19526

@ HII | San Antonio, TX, Texas, United States
View on infosec-jobs.com

Cloud Platform Engineer (Hybrid) - 19535

@ HII | Greer, SC, South Carolina, United States
View on infosec-jobs.com